STIGQter: STIG Summary: Nokia Service Router OS 25.x Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia Multiprotocol Label Switching (MPLS) router must be configured to synchronize Interior Gateway Protocol (IGP) and Label Distribution Protocol (LDP) to minimize packet loss when an IGP adjacency is established prior to LDP peers completing label exchange.

DISA Rule

SV-283869r1203856_rule

Vulnerability Number

V-283869

Group Title

SRG-NET-000512-RTR-000003

Rule Version

NOKI-RT-000510

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the MPLS router to synchronize IGP and LDP, minimizing packet loss when an IGP adjacency is established prior to LDP peers completing label exchange, as shown in the example below:

- configure router interface "TO-PE3" ldp-sync-timer 100

Check Contents

Review the router OSPF or IS-IS configuration.

Verify LDP will synchronize with the link-state routing protocol using the command below:

- show router isis interface "TO-PE3" detail | match Ldp
Ldp Sync : inService Ldp Sync Wait : Disabled
Ldp Timer State : Disabled Ldp Tm Left : 0

If the router Ldp Sync is not "inService", this is a finding.

Vulnerability Number

V-283869

Documentable

False

Rule Version

NOKI-RT-000510

Severity Override Guidance

Review the router OSPF or IS-IS configuration.

Verify LDP will synchronize with the link-state routing protocol using the command below:

- show router isis interface "TO-PE3" detail | match Ldp
Ldp Sync : inService Ldp Sync Wait : Disabled
Ldp Timer State : Disabled Ldp Tm Left : 0

If the router Ldp Sync is not "inService", this is a finding.

Check Content Reference

M

Target Key

5746